Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75C5BE9ACDED11EF806F1697762E951A.roa
File: 75C5BE9ACDED11EF806F1697762E951A.roa (raw, json)
Hash identifier: ybsyqRfX54iPX0Hc01GOwbPXewkELj58OkYswn7Gzf0=
Subject key identifier: 54:9D:B2:9E:66:21:42:6E:2F:63:C3:B6:C9:9A:40:3C:F8:74:B9:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01381B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75C5BE9ACDED11EF806F1697762E951A.roa
Signing time: Wed 08 Jan 2025 18:22:04 +0000
ROA not before: Wed 08 Jan 2025 18:22:00 +0000
ROA not after: Sat 03 Jan 2026 18:22:00 +0000
asID: 984
IP address blocks: 154.89.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79899 (0x1381b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:22:00 2025 GMT
Not After : Jan 3 18:22:00 2026 GMT
Subject: CN=677ec24c-0bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:d3:93:ae:f8:6b:58:2f:bd:51:e0:ad:d3:
97:7d:9c:16:79:11:d6:cc:40:e9:4e:00:af:d7:42:
be:06:a9:0b:cc:87:37:f2:8d:f6:28:66:0e:49:79:
62:de:45:9e:86:f3:2a:01:6a:7a:fc:04:43:28:83:
f1:63:96:c5:12:1c:17:da:07:59:72:fe:a8:a0:f6:
41:d7:eb:bd:b2:d5:e7:fd:81:40:5f:50:a0:8f:32:
c8:41:07:6c:46:1e:66:22:1a:91:54:e3:3b:84:fc:
5d:04:e4:05:9e:7e:91:7b:46:8a:8c:b3:20:2e:0d:
69:2a:fa:8f:e6:44:85:73:c7:d0:a4:b4:05:96:11:
c9:27:31:19:a5:2d:11:9e:e5:26:ad:0d:b3:c9:d4:
3b:ec:0c:d7:75:3c:28:d6:ec:0a:17:81:2b:80:3b:
9c:9c:3a:55:81:c1:28:4e:01:3e:9d:44:a9:d4:eb:
24:a8:93:de:88:35:46:d3:8f:c6:e2:45:ac:06:0a:
20:6a:25:6a:17:7c:2d:4c:a8:4c:9d:8f:0e:19:d7:
a0:77:d5:dc:84:8f:a1:d6:dd:32:12:29:d5:f2:d7:
f9:06:65:f2:8c:55:80:4c:7e:a5:37:a6:82:b6:88:
c5:90:11:a4:49:e0:08:8d:63:e0:c7:10:83:fc:9c:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:B2:9E:66:21:42:6E:2F:63:C3:B6:C9:9A:40:3C:F8:74:B9:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75C5BE9ACDED11EF806F1697762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:67:75:71:d4:8a:c9:18:8e:91:5a:d9:31:6d:5b:94:6b:26:
fe:be:d3:85:36:f9:ad:5d:a8:d4:5c:21:fa:bb:4a:66:04:22:
d6:bf:dc:82:ab:b5:83:1b:ba:c5:49:14:07:c9:ca:21:0a:7d:
f0:24:09:77:19:e3:72:39:05:f1:d4:df:3d:1a:37:bd:83:54:
e4:42:44:ad:b7:c4:10:c4:b5:f0:9e:fd:31:db:bc:7f:ad:15:
ea:59:51:65:9c:e7:83:9f:4f:3d:1d:db:a5:d8:d4:75:4c:c1:
0e:8f:74:7b:14:ea:09:5e:39:7f:b9:cd:5d:c7:81:8b:c5:5e:
c6:8c:75:37:57:f8:32:1f:7c:41:34:6a:db:7d:66:6f:74:06:
12:7d:e8:7a:ff:1b:da:79:c8:c1:eb:29:75:b9:d3:d1:0a:75:
19:ea:87:bc:03:df:8a:2b:6b:1c:75:d3:13:76:dd:f0:16:f6:
d2:a6:68:9f:2a:5b:9d:1d:06:86:90:67:fa:65:b0:80:97:a5:
3a:a4:b0:ae:54:6c:c3:a7:03:df:d9:44:6f:28:2f:3e:7f:1a:
73:86:b6:d3:f7:cc:d1:3a:a6:cc:24:6d:53:4b:56:59:0a:71:
d8:58:a2:33:c9:a4:9b:f1:ec:5e:06:5a:43:07:06:2b:d9:67:
24:53:7c:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATgbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTgyMjAwWhcNMjYwMTAzMTgyMjAwWjAYMRYw
FAYDVQQDEw02NzdlYzI0Yy0wYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoJLTk674a1gvvVHgrdOXfZwWeRHWzEDpTgCv10K+BqkLzIc38o32KGYO
SXli3kWehvMqAWp6/ARDKIPxY5bFEhwX2gdZcv6ooPZB1+u9stXn/YFAX1CgjzLI
QQdsRh5mIhqRVOM7hPxdBOQFnn6Re0aKjLMgLg1pKvqP5kSFc8fQpLQFlhHJJzEZ
pS0RnuUmrQ2zydQ77AzXdTwo1uwKF4ErgDucnDpVgcEoTgE+nUSp1OskqJPeiDVG
04/G4kWsBgogaiVqF3wtTKhMnY8OGdegd9XchI+h1t0yEinV8tf5BmXyjFWATH6l
N6aCtojFkBGkSeAIjWPgxxCD/Jzl6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFSd
sp5mIUJuL2PDtsmaQDz4dLlnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NUM1QkU5QUNERUQxMUVGODA2RjE2OTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlncMA0GCSqGSIb3DQEB
CwUAA4IBAQCNZ3Vx1IrJGI6RWtkxbVuUayb+vtOFNvmtXajUXCH6u0pmBCLWv9yC
q7WDG7rFSRQHycohCn3wJAl3GeNyOQXx1N89Gje9g1TkQkStt8QQxLXwnv0x27x/
rRXqWVFlnOeDn089Hdul2NR1TMEOj3R7FOoJXjl/uc1dx4GLxV7GjHU3V/gyH3xB
NGrbfWZvdAYSfeh6/xvaecjB6yl1udPRCnUZ6oe8A9+KK2scddMTdt3wFvbSpmif
KludHQaGkGf6ZbCAl6U6pLCuVGzDpwPf2URvKC8+fxpzhrbT98zROqbMJG1TS1ZZ
CnHYWKIzyaSb8exeBlpDBwYr2WckU3zi
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:18 2025 by rpki-client